$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json) Hash identifier: dMJqgVFGHJsma1ZhmJK1j18qRDeEkoNRHTV+dG8RoyU= Subject key identifier: F1:F2:AF:40:F5:87:CC:D9:34:F2:FD:CD:F1:6D:8B:73:94:BD:2C:CC Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft Manifest number: 34AD Signing time: Fri 16 May 2025 14:54:32 +0000 Manifest this update: Fri 16 May 2025 14:54:32 +0000 Manifest next update: Fri 23 May 2025 14:54:32 +0000 Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: VygH2LsOLfpQBMaiycUeKf6/ZAiyGWpY/YB9jOjraYY=) 2: F026CE74927411EDB020A481C4F9AE02.roa (hash: D3nZr89FC3B/hYB2ABfVDlFpa9Kx2bcJix0bhxq7u3Y=) 3: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: 7ZkKrwIf5dxU1AyQHdEtx/cZNmt12RU0pVuLQbnEwD8=) 4: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: /XOWg1DL5Ca4WTABh7nowkgqWfXA9qIHVM17A2ry+Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 14:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Validity Not Before: May 16 14:54:32 2025 GMT Not After : May 23 14:54:32 2025 GMT Subject: CN=682751a8-03ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:fa:f9:e8:ae:42:ae:59:27:0f:89:e2:06: f2:26:e6:99:70:96:8b:a7:94:d1:34:be:73:b1:81: a8:f8:40:34:55:89:e5:84:b2:c0:1e:02:de:15:63: 3f:91:a1:8c:3f:e4:62:c3:9a:b9:59:e3:ef:bf:da: 41:61:c1:af:56:08:07:7e:1d:2d:e1:cc:59:0e:c4: 7a:ef:c9:e9:c9:e2:2d:e9:20:14:f3:ba:d0:2e:60: 90:04:9c:ef:6e:0c:b4:26:b1:07:4f:65:e9:48:ad: 80:ef:c8:a6:a8:c6:47:26:8c:3d:db:ef:6e:b3:43: 4b:52:c1:6f:72:95:41:ac:5b:49:97:f5:72:de:0b: 0c:3d:cd:38:aa:e1:e9:47:25:29:9c:a3:69:f4:91: 03:c2:d0:bd:79:68:b7:55:9d:b2:27:cf:70:b2:45: a1:bc:79:12:ba:05:ea:f1:c8:d6:8c:81:46:d0:cf: 0e:bb:c6:45:3f:4e:8e:05:aa:03:de:05:c6:b1:ac: 1c:5e:84:54:e0:26:45:0a:b8:d9:dd:ef:1d:92:d0: ac:33:02:52:b9:89:6f:82:a6:31:39:fd:25:a7:00: 51:07:2c:20:fa:a2:f2:10:3f:09:4a:14:43:47:c4: 6f:f3:90:e2:c8:79:7a:ea:9b:d0:b5:dc:9b:78:a1: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:AF:40:F5:87:CC:D9:34:F2:FD:CD:F1:6D:8B:73:94:BD:2C:CC X509v3 Authority Key Identifier: keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:19:da:ed:ce:17:d4:d1:fe:02:a1:94:61:8a:ab:bb:bb:76: cc:40:b8:a4:d9:2d:fa:27:d3:13:04:92:5a:fb:50:d8:66:2d: 46:23:a9:bc:99:bc:3d:8a:f1:11:d1:7a:fa:e8:a1:65:5c:54: 98:09:b6:5f:30:c0:99:3c:d8:a3:a9:58:e8:fd:23:68:69:bc: e8:87:cc:1a:0c:de:47:35:1d:33:4f:96:bc:b7:9b:66:84:c6: 76:e8:c1:b7:b4:3a:12:fb:c5:a5:ca:86:73:a9:9f:fe:d8:ba: 43:b6:f5:d4:fd:e0:a8:55:d3:d8:7b:7c:3a:5b:9d:1c:f3:48: e7:8e:1f:0f:db:ef:14:75:bc:41:fa:26:31:d6:23:bc:24:23: 71:e7:dd:c3:f5:66:63:09:6d:e1:2a:45:5e:58:cc:40:00:83: 21:d4:22:e6:9c:e6:35:c3:80:ad:9f:02:4a:87:21:f4:f9:5a: 10:15:5c:bc:c2:c5:d2:43:01:3e:cd:8b:9b:3a:3e:ab:94:62: 83:33:1a:ba:4a:a4:7c:c3:a0:d2:f8:5c:ae:a0:f7:a0:50:9a: fe:f9:50:4f:a1:94:4b:9b:f0:64:01:9a:85:79:5a:38:24:fc: 4b:a7:86:67:35:fb:fe:b3:f0:b0:69:46:28:2d:9a:ca:61:25: c4:21:8b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1 OUE1MkZEN0YwHhcNMjUwNTE2MTQ1NDMyWhcNMjUwNTIzMTQ1NDMyWjAYMRYwFAYD VQQDEw02ODI3NTFhOC0wM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH76+eiuQq5ZJw+J4gbyJuaZcJaLp5TRNL5zsYGo+EA0VYnlhLLAHgLeFWM/ kaGMP+Riw5q5WePvv9pBYcGvVggHfh0t4cxZDsR678npyeIt6SAU87rQLmCQBJzv bgy0JrEHT2XpSK2A78imqMZHJow92+9us0NLUsFvcpVBrFtJl/Vy3gsMPc04quHp RyUpnKNp9JEDwtC9eWi3VZ2yJ89wskWhvHkSugXq8cjWjIFG0M8Ou8ZFP06OBaoD 3gXGsawcXoRU4CZFCrjZ3e8dktCsMwJSuYlvgqYxOf0lpwBRBywg+qLyED8JShRD R8Rv85DiyHl66pvQtdybeKF8+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHyr0D1 h8zZNPL9zfFti3OUvSzMMB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCNy8xQzE2NjQxQzFEOTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVy SXRzT3hna1Zmd3hacFNfWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3GdrtzhfU0f4CoZRhiqu7u3bMQLik2S36J9MTBJJa+1DYZi1GI6m8 mbw9ivER0Xr66KFlXFSYCbZfMMCZPNijqVjo/SNoabzoh8waDN5HNR0zT5a8t5tm hMZ26MG3tDoS+8WlyoZzqZ/+2LpDtvXU/eCoVdPYe3w6W50c80jnjh8P2+8UdbxB +iYx1iO8JCNx593D9WZjCW3hKkVeWMxAAIMh1CLmnOY1w4CtnwJKhyH0+VoQFVy8 wsXSQwE+zYubOj6rlGKDMxq6SqR8w6DS+FyuoPegUJr++VBPoZRLm/BkAZqFeVo4 JPxLp4ZnNfv+s/CwaUYoLZrKYSXEIYv8 -----END CERTIFICATE-----Generated at Sat May 17 00:12:39 2025 by rpki-client